diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 553df6d..bad259a 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -79,7 +79,10 @@ jobs:
       run: |
         case ${{ matrix.os }} in
           ubuntu*)
-            sudo apt-get -qq install libc6-dev-amd64-cross libgcc-s1-amd64-cross libtbb-dev gobjc gobjc-multilib xutils-dev publib-dev libiberty-dev libc6-dev-i386 libmm-dev kmod libc-bin dcfldd libtree buildd mini-buildd mini-buildd-utils
+            sudo apt-get -qq update
+            sudo apt-get -qq install libc6-dev-amd64-cross libgcc-s1-amd64-cross libtbb-dev gobjc gobjc-multilib \
+              xutils-dev publib-dev libiberty-dev libc6-dev-i386 libmm-dev kmod libc-bin dcfldd libtree \
+              buildd mini-buildd mini-buildd-utils
             if test -x /home/linuxbrew/.linuxbrew/bin/brew; then \
               eval "$(/home/linuxbrew/.linuxbrew/bin/brew shellenv)"; \
             else \
@@ -106,7 +109,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v4
+      uses: github/codeql-action/init@v4.37.4
       with:
         languages: ${{ matrix.language }}
         build-mode: ${{ matrix.build-mode }}
@@ -137,7 +140,7 @@ jobs:
         exit 1
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v4
+      uses: github/codeql-action/analyze@v4.37.4
       with:
         category: "/language:${{matrix.language}}"
       env: